Privacy Policy
Last updated: January 2026
1. Controller
HLB Holding GmbH
Represented by: Dr. Ali Khalaf (Managing Director)
Frankenring 16
30855 Langenhagen
Germany
Phone: +49 511 353 999 03
Email: HLB@dr-khalaf.de
Website: dr-khalaf.com
2. Overview of Processing
This privacy policy explains how we collect, use, and protect personal data when you:
• Visit our website
• Contact us (email/phone)
• Use our services
This policy covers all divisions of the Dr. Khalaf Group:
• HLB Holding GmbH (Holding company)
• F&K Immobilien GbR (Real estate)
• Dental practices (Hannover, Herford, Bielefeld)
3. Legal Bases
We process personal data under:
• Art. 6(1)(a) GDPR — Consent
• Art. 6(1)(b) GDPR — Contract performance / pre-contractual measures
• Art. 6(1)(c) GDPR — Legal obligations
• Art. 6(1)(f) GDPR — Legitimate interests (e.g., security, stability, fraud prevention)
For cookies and device access: § 25 TTDSG (German Telecommunications-Telemedia Data Protection Act) applies where consent is required.
4. Hosting and Server Log Files
Our website is externally hosted. When you visit our website, the server automatically processes:
• IP address
• Date and time of access
• Pages requested
• Referrer URL
• Browser type and version
• Operating system
• Status codes
Purpose: Website delivery, security, stability, troubleshooting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure delivery).
We have concluded a data processing agreement (DPA/AVV) with our hosting provider.
5. Cookies and Similar Technologies
This website uses only strictly necessary cookies required for the operation of the website.
Legal basis: Art. 6(1)(f) GDPR; § 25(2) TTDSG (no consent required for strictly necessary cookies).
We do not use analytics, tracking, or marketing cookies. No consent management tool (cookie banner) is required, as no consent-dependent cookies are used.
You can manage cookie usage at any time through your browser settings.
6. Contact
When you contact us by email, phone, or other means, we process:
• Your name and contact details
• Message content
• Communication metadata (time, channel)
Purpose: Responding to inquiries, documentation, pre-contractual measures.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).
Your data will be deleted once the inquiry has been fully addressed, unless legal retention obligations apply.
7a. Real Estate (F&K Immobilien GbR)
In connection with our real estate activities, we may process — depending on your request:
• Identification and contact data (name, address, email, phone)
• Property interests and search criteria
• Documents you provide
• Communication history
• Billing and contract data where applicable
Purposes: Property inquiries, brokerage, management, contract preparation and execution.
Legal bases: Art. 6(1)(b) GDPR (contract); Art. 6(1)(c) GDPR (legal retention); Art. 6(1)(f) GDPR (documentation, fraud prevention).
Recipients: Property owners/landlords, service providers, notaries/authorities where legally required.
7b. Holding Company (HLB Holding GmbH)
In connection with our holding activities, we process:
• B2B contact and communication data
• Contract and billing data
• Due diligence materials provided to us where applicable
Purposes: Corporate governance, business relationships, compliance, contract management.
Legal bases: Art. 6(1)(b), (c), (f) GDPR.
7c. Dental Practices
No patient data is collected through this website. We do not operate an online booking system and do not collect health data via this website.
When you contact us online or coordinate appointments via email/phone, we process only contact and appointment data.
Within the treatment relationship (at the practice), we process health data (special categories under Art. 9 GDPR). This processing is based on:
• Art. 6(1)(b) GDPR (treatment contract)
• Art. 9(2)(h) GDPR (healthcare provision)
• Art. 6(1)(c) GDPR (legal obligations, e.g., documentation)
• Art. 6(1)(f) GDPR (defense of legal claims)
Further information is available at the respective practice.
8. Third-Party Tools and External Services
This website does not use any third-party analytics, advertising, or tracking tools. Specifically, we do not use:
• Google Analytics or comparable analytics services
• Google Maps or external map services
• Google Fonts or external web fonts (we use locally hosted fonts)
• reCAPTCHA or external spam protection services
• YouTube or external video embeds
• Social media plugins
No personal data is transmitted to third-party providers for analytics or marketing purposes.
9. Data Retention
We store personal data only as long as necessary for the respective purpose. Beyond that, we retain data only where:
• Legal retention obligations apply (e.g., commercial and tax law: 6 or 10 years)
• Necessary to assert, exercise, or defend legal claims
10. Recipients and International Transfers
We share personal data only when necessary:
• With processors (e.g., hosting provider) under a data processing agreement
• With contractual partners (e.g., property owners, notaries) in the course of business
• With authorities where legally required
If data is transferred outside the EU/EEA, we ensure appropriate safeguards (e.g., adequacy decision or Standard Contractual Clauses).
11. Your Rights
You have the right to:
• Access your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time with future effect
To exercise your rights, contact: HLB@dr-khalaf.de
You also have the right to lodge a complaint with a supervisory authority. The competent authority is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
www.lfd.niedersachsen.de
12. Security
We use technical and organizational measures to protect your data, including TLS encryption for data transmission.
13. Updates
We may update this privacy policy. The current version is always available on our website.